The Webkitgtk Team Webkitgtk vulnerabilities

3 vulnerabilities

Known vulnerabilities in The Webkitgtk Team Webkitgtk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.4CVE-2025-13947debianwebkit2gtk+7
EPSS score
0.33%
A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.7.5CVE-2025-13502debianwebkit2gtk+7
EPSS score
0.58%
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.8.8CVE-2025-66287debianwebkit2gtk+7
EPSS score
0.47%
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.